Emiko may process personal data depending on customer configuration, enabled modules, operational use, support activity and payment or billing setup. The relevant GDPR assessment depends on the processing purpose, role allocation, data categories, subprocessors, retention and security measures.
Depending on the specific setup and purpose, Emiko may process data that is personal data when it relates to an identified or identifiable person. This may include:
Operational measurement data, roles, permissions and technical logs are not automatically personal data in isolation. They become personal data when they identify a person or can reasonably be linked to a person, account, access credential, session or support case.
The customer or Partner will normally be the data controller for customer users, sites, equipment and operational use of Emiko.
Vikingegaarden will normally act as data processor for customer-controlled data processed in Emiko. Vikingegaarden may also act as data controller for its own business, support, administration, security and supplier-management purposes.
Hosting, backup, security, communication, payment, support, logging or analytics suppliers may act as subprocessors where they process personal data on behalf of Vikingegaarden as part of delivering Emiko.
Data processing review material can include a data processing agreement, subprocessor information, technical and organisational measures, hosting and backup descriptions, supplier assurance information, and retention or deletion information where relevant.
GDPR documentation can support onboarding, procurement, customer security review and data processing review. The documentation explains the relevant processing purpose, data categories, responsibility model, supplier roles and security measures at the level needed for customer assessment.
Public revision 21/05/2026